Spec v0.4: cartridge blueprints (SKEEP-007, ADR-015)

[michalharakal]

Tracking issue: #6. Proposal: docs/modules/ROOT/pages/skeep/007-cartridge-blueprints.adoc.

What this adds

A blueprint is the open, weight-free recipe a cartridge is built from; materialization executes it against a profile and yields an ordinary signed cartridge. This is what lets a cartridge be open source when its weights cannot live in a source repository, and it turns the prose build loop ("Developing a cartridge") into something a machine and a reviewer can check.

• blueprints.adoc (normative, drafted): terms; MUST / MUST NOT; anatomy of blueprint.json; a closed step vocabulary (fetch, convert, quantize, export, compile, build-runtime, measure, pack, sign); the ten-step materialization procedure; descriptor resolution (the honesty rule is kept — a recipe may carry only reference measurements); licensing evaluated at materialization with a per-source redistribution class (allowed / restricted / acceptance-required); provenance; downstream/private materialization without a fork; reproducibility (direction, OQ11); open questions OQ-B1…B4.
• Schemas cartridge-blueprint.schema.json, materialization-profile.schema.json + a worked FunctionGemma pair.
• Manifest: optional provenance.blueprint and provenance.materialization (additive). Descriptor spec_version accepts 0.3 and 0.4 (shape unchanged).
• ADR-015 (proposed), SKEEP-007 (Draft).
• Concept page: cross-references from anatomy, Developing, Modes B/C, OQ11, "what is not a cartridge"; changelog v0.4; fixes the header that still said spec version 0.2. Roadmap: the materializer.
• First guides: tutorial Build a cartridge from a blueprint (marked preview — the materializer plugin does not exist yet), how-to Materialize privately, explanation Blueprint vs. cartridge.

Verification

• Worked blueprint + profile validate; the descriptor resolved from them validates against cartridge-descriptor.schema.json.
• Negative cases rejected by schema: performance inside a template, a source file without a digest, an unknown redistribution class, blueprint provenance without a digest.
• All existing example descriptors and manifests validate unchanged; verify_manifest.py → ALL SIGNATURES OK.
• Antora site builds with no warnings (27 pages, all xref anchors present, {spec_version} renders 0.4); ./gradlew build green.

Review notes

• Draft on purpose: terminology and the step vocabulary are the things worth arguing about before anything is built on them.
• The tutorial clones SKaiNET-developers/skainet-cartridge-blueprints, which does not exist yet — adjust if the repository gets a different name.
• The Moonshine example in the licensing section relies on this spec's existing statement that Moonshine's non-English checkpoints are under a revenue-capped community license.